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IPv6 Header Format 






IP v6 Header 






Hop-by-hop options 






Routing 




Vl40 


Fragmentation 




Authentication 






Encapsulation security 






Destination options 


J 




New Extension Header 


—120 


TCP Header i 




—160 


Data 




—180 
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NEW EXTENSION 
HEADER FIELD NAME 


MINIMUM 
SIZE 


FIELD 
DESIGNATOR 


Extension Header Size 


128 bits 


0 (zero) 


Packet Type 


2 bits 


A 


Requested Number of 
False Packets 


8 bits 


B 


Minimum Hops for False 
Packets 


8 bits 


C 


Minimum False Packpt 
Body Size (Bytes) 


32 bits 


D 


Maximum False Packet 
Body size (Bytes) 


32 bits 


E 


Baseline False Packet 
Body Size (Bytes) 


32 bits 


F 


True Packet (Message) 
Source Address 


i4io DltS 


G j 


Packet Bodv Rp-pnrrvtinn 

Permitted 


1 bit 


H 


False Packet Generation 
Probablity ! 


O DltS 


I 


False Packet Generation 
Probablity Decay Rate 


8 bits 


J 


Re-encryption Performed 


1 bit 


K 


Re-encryption Probablity 


8 bits 


L 


Total number of Re-encryp- 
tions 


32 bits 


M 


Decryption Key Pointer 


128 bits per re- 
encryption 


N 
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310 



m 
m 
m 
si 
m 



312 



314 



316 



318 



320 



322 



NEW EXTENSION 
HEADER FIELD NAME 


MEANING 


BIT DEFINITIONS 


Extension Header Size 


Size (in bits) of the 
new extension header 
within the current packet 


N/A 


Packet Type 


Type of packet 
being transmitted 


00 - True packet 

01 - First generation 
false message packet 
10- Second or later 
generation false < 
message packet. 

1 1 - First generation 
false message packet 
generated by an inter- 
mediate host between 
originator and recipient 
of true message packet 


Requested Number of 
False Packets 


Number of first generation 
false packets requested to 
be generated by true 
message packet recipient 


N/A 


Minimum Hops for False 
Packet 


Number of laps within the 
network that a false 
packet must complete 


N/A 


Minimum False Packet 
Body Size (Bytes) 


Minimal size in bytes of the 
payload (data segment) in 
the packet for a false 
message packet 


M/A 


Maximum False Packet 
Body size (Bytes) 


Maximum size in bytes of 
the payload (data segment) 
in the packet for a false 
message packet 


N/A 


Baseline False Packet 
Body Size (Bytes) I 


Actual size in bytes of the 
payload (data segment) in 
the true current message 
packet 


N/A 
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324 


NEW EXTENSION 
HEADER FIELD NAME 


MEANING 


BIT DEFINITIONS 




True Packet Source 
Address 


IPv6 address of the source 
of the true message packet 


N/A 


326 


Re-encryption Permitted 


Whether intermediate 
hosts can add a new level 
of encryption to packet by 
re-encrypting the body of 
the message packet 


&- re-encryption is not 

permitted 

1 - re-encryption is 

permitted 


328 


False Packet Generation 
Probability 


Binary value for the 
false packet generation 
probability 


0 - false packet genera- 
tion probability is zero 
>0 - false packet 
generation probability. 
Value is equal to 1 
divided by the decimal- 
ized value of the bit 
representation 


330^ 


Probablity Decay Rate 


Binary value tor tne 
false packet generation 
probability decay rate 


11111111- falQA napl^ot 
i i i l l I 1 I - let lot; JJdOrvei 

generation probability is 
set to zero after genera- 
ting one false packet. 
<11111111 - bit value 
to be added to False 
Packet Generation 
r juuauiiiiy value ©sen 
time a false packet is 
generated at a host 


332^ 


Re-encryption Performed 


Whether an intermediate 
host has re-encrypted 
the packet body 


N/A 


334^ 


Re-encryption Probablity 


Binary value for the 
probability that 

rp-pnorvntionwill hp 
■ w \si y yj Livji ivv ill uc 

performed on the packet 


0 - re-encryption 
probability is zero 
>£f - re-encryption 
3roDaDinty. value is 
equal to 1 divided by 
the decimalized value 
of the bit reoresentation 


336^ 
338 


Total Number of Re- 
encryptions | 


A count of the number of 
reen-encryptions performed 
on a given packet as it 
moved through the network 


N/A 




Decryption Key Pointer 


Designator for each 
decryption key needed to 
undo encryption applied 
by an intermediate host 


N/A 
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Determine number of false 
packets to be transmitted 
from host sending true 
packet. Set X = number 
of false packets 



Set All Extension Field 
Values to Null. Set Field £f 
to 562 



Determine number false 
packets that the recipient 
should generate. 
Place value in Field B 



Determine min 
of hops that ea 
packet should 
Place value in 


mum number 
ch false 
;raverse. 
Field C 







Determine minimum size (in 
bytes) of false packet body. 
Place value in Field D 



I 



Determine maximum size (in 
bytes) of false packet body. 
Place value in Field E 



Place size of true packet 
body in Field F 




-410 



-412 



-414 



-416 



-418 



-420 



-422 




Determine if over-encryption 
of message packet body is 
permitted. Place value in 
Field H 



■424 



Determine false packet 
generation probability. 
Place value in Field I 



Determine false packet 
generation probability decay 
rate. Place value in Field J 



•426 



•428 



Place true packet source 
host address in Field G 



430 



Determine re-encryption 
probability. Place value in Field L 



-432 



Encrypt extension header. 
Complete remainder of IPv6 
message headers 



Encrypt true message body. 
Place result in message 
packet body portion of IPv6 
packet. Transmit true packet 



434 



436 



fig. 4 



(Conti 



Continue Until Done 



0 
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Is the new extension 
header present ? 



Yes 



Decrypt new extension 
header. Does the value in 
FiledA = £f#? 



No 



I 



Is the host the intended 
recipient of the false 
packet ? 



No ^ 



Does the value in Field 
A =01 ? 



No 



Does the value in Field 
A=10? 



No 



Does the value in Field 
A=11 ? 



No W 



Discard packet, report 
error back to sending host. 



-510 



Perform standard IPv6 message 
transmission actions 



•512 



Is the host the 
intended recipient 
of the true packet ? 



516 
Yes 



No 



518 



Discard 
packet 



Yes 



520 



Yes 



522 



Yes 



>© 
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in 



m 



V 


,-610 


Save all values in all fields 
in new extension header. Set 
X = Field B. Is the value 
in rieia a > juy) ( 


w 

^No w 




Yes i 




Randomly select a host for 
false packet. Place result in 
IPv6 destination host 
address field 


< 

< 1 

^660 


V 




Does selected host address 
satisfy minimum hop 
requirement in Field C ? 


No 


^662 



*© 



672 



Place value 01 in Field A 
of false packet, decrement 
Xby1 



Yes 



I 



Encrypt extension header. 
Complete remainder of IPv6 
message headers and 
processing and transmit 
new false packet 



Determine size (in bytes) 
of false packet body 
using value in Field F 
as a guide 



-664 




Is X = JZT? 



Does false packet size 
satisfy minimum and 
maximum size requirements 
in Fields D and E ? 



No 



Yes 



Fill in the packet body 
with random values 



-666 



-668 



0* 



V Yes 



If value in Field K = 1 , 
decrypt true packet body 
in reverse order in which 
encryptions were performed 
using the value in Fields 0 
and N to determine the end 
of the extension header. The 
decryption pointer used for 
the sender is given by the 
value in Field G 



Set all extension header 
field values to zero. Copy 
saved values for Fields 0, 
B, C, D, E, H, I, J, K, L, 
M, and N from original 
packet to new extension 
header in outbound false 
packet 



Pass decrypted message to 
TCP level of the message 
management stack 



-670 



c 



DONE 



J 



Jig. 6 



674 



676 



612 



-614 
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No 




Save all values in all fields 
in new extension header. 
Is the value in Field H = 1? 



Yes 



Generate an 8 bit random 
number 



No 



Is generated 8-bit value >= 
value in Field L of original 
message ? 



Yes 



710 



712 



714 



Re-encrypt message packet 
body, set Field K = 1 , add 1 
to Field M, append 
decryption key pointer to 
Field N, add 128 to Field ef. 
Save Fields 0 and N 



-716 



Encrypt new extension header 
Complete remainder of IPv6 
message transmission 
actions and transmit message 
packet 



•720 



Set X = Field B 



-722 
-724 



is x > jer? 



Ml 



Generate an 8 bit random 
number, decrement X 



726 



Is generated 8-bit value >= I M n 
value in Field I ? 



Yes 





730 



Determine size (in bytes) of 
false packet body using 
value in Field F as a guide 



Does false packet body size 
satisfy minimum and 
maximum size requirments 
in Fileds D and E ? 



No 



Set all new extension header 
field values to zero. Copy 
saved values for Fields 0, 
B, C, D, E, H, J, K, L, 
M, and N from original 
packet to false packet 
extension header. 
Place random values in 
packet body 



Y = saved value for Field I 
plus saved value for Field J 
of incoming false packet. 



Field I of new false packet = 
Y 

Field A =10 



Select recipient host 
Encrypt extension header. 



Complete remainder of IPv6 
transmission actions and 
transmit new false packet. 



DONE 



Procedure 5.2 



732 



734 



-736 



738 



740 



-742 
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No 




Save copies of values for 
all fields of incoming new 
extension header. 
Does Field H = 1 ? 



If 



m 

Sf. 
Ml 



li 

13 



Yes 



Generate an 8 bit random 
number 



No 



Is generated 8-bit value >= 
value in Field L of original 
message ? 



Yes 



Re-encrypt incoming 
message packet body, set 
Field K to 1 , add 1 to Field 
M, append decryption key 
pointer to Field N. Add 128 
to Field 0. Save Fields £f 
and N 



Encrypt new extension header. 
Complete remainder of IPv6 
message transmission 
actions and transmit message 
packet 



Y = saved value for Field J 
plus saved value for Field I 
Set X = saved value for 
Field B 




810 



812 



814 



No 



-816 



-818 



820 



is x >jeT? 



ft 



Yes 




No 



822 




Generate an 8 bit random 
number, de crement X 

1 



Is generated 8-bit value > = 
value in Field I ? 



Yes V 



\ 



824 



826 



828 



Determine size (in bytes) of 
false packet body using 
value in Field F as a guide 



Does false packet body 
size satisfy minimum and 
maximum size requirements 
in Fields D and E ? 



Yes 



I 



No 

n. 



830 



Set all extension header 
field values to zero. Copy 
saved values for Fields # 
B, C, D, E, H, J, K, L, 
M, and N in original 
packet to new extension 
header in outbound false 
packet. Fill in packet body 
with random values 



1 



832 



FieldA=1£f 
Field I = Y 

Select recipient host 



V 



834 



Encrypt new extension header. 
Complete remainder of IPv6 
message transmission 
actions and transmit new 
false packet 



-836 



DONE 



D 
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No 




Save copies of values for 
all fields of incoming packet 
new extension header 
for use in this procedure. 
Does Field H = 1 ? 



hi 

m 

% I 

5. 

M 5 



0 



m 

m 



Yes y 



Generate an 8 bit random 
number 



No 



Is generated 8-bit value >= 
value in Field L of original 
message ? 

" " 1 



Yes 



Re-encrypt message packet 
body, set Field K = 1 , add 1 
to Field M, append 
decryption key pointer to 
Field N, add 128 to Field J2f. 
save Fields 0 and N 



Encrypt new extension header. 
Complete remainder of IPv6 
message transmission 
actions and transmit message 
packet 



Set X = Field B 



910 



-912 



•914 



-916 



•918 



-920 
-922 



Is X > 0 ? 



YesY 



Generate an 8 bit random 
number, decrement X 



924 



Is generated 8-bit value >= 
value in Field I ? 



No 



No 





930 



Determine size (in bytes) of 
false packet body using 
value in Field F as a guide 



I 



Does false packet body size 
satisfy minimum and 
maximum size requirements 
in Fields D and E ? 



No 



rt 



932 



Set all new extension header 
field values to zero. Copy 
saved values for Fields 0, 
B, C, D, E, H, I, J, K, L, 
M, and N from original 
packet to false packet 
extension header. 
Place random values in 
packet body 



Field A =11 

Select recipient host for 
false packet 
Encrypt new extension header 



934 



-936 



Complete remainder of IPv6 
transmission actions and 
transmit new false packet 



J 



-938 



lure 5.4 



DONE 



J 
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Determine false packet 
minimum hop requirement, 
store this value in the 
variable Z 



s 



Is X >£f? 



Yes Y 



1010 

1012 
No 



< 



Return 



J 



Decrement X 



1014 
-1016 



Determine size (in bytes) of 
false packet body using 
value in Field F as a guide. 



Does false packet body 
size satisfy minimum 
and maximum size 
requirements in Fields D 
and E ? 



Yes 



No 



1 



1018 



Set all extension header field 
values to zero. Copy values 
for Fields 0, B, C, D, E, G, H, 
I, J, and L from true packet 
to new extension header in 
outbound false packet. 
Fill in packet body with 
random values 



1020 



1022 



Determine recipient host for 
the false packet. 
Place result in IPv6 
destination host address field 



1024 



Does selected host address 
satisfy minimum hop 
requirements stored in Z ? 



No 



1026 



Yes 



1028 



Set Field A= jzfl 



1030 



Encrypt new extension header 

$ 



Complete remainder of IPv6 
message transmission 
actions and transmit new 
false packet. 



'Fig. 10 



Procedure 4.1 



